Package org.alfresco.repo.node

Class CDDefinitionProtection

java.lang.Object

org.alfresco.repo.node.CDDefinitionProtection

All Implemented Interfaces:

NodeServicePolicies.BeforeCreateNodePolicy, NodeServicePolicies.BeforeDeleteNodePolicy, NodeServicePolicies.BeforeMoveNodePolicy, NodeServicePolicies.BeforeSetNodeTypePolicy, NodeServicePolicies.BeforeUpdateNodePolicy, ClassPolicy, Policy

public class CDDefinitionProtection
extends Object
implements NodeServicePolicies.BeforeCreateNodePolicy, NodeServicePolicies.BeforeUpdateNodePolicy, NodeServicePolicies.BeforeDeleteNodePolicy, NodeServicePolicies.BeforeMoveNodePolicy, NodeServicePolicies.BeforeSetNodeTypePolicy

Behaviour bean that protects the Cascading Dictionary type (cd:definition) from being created, updated, deleted, moved via the everyday Alfresco APIs (Node REST API, CMIS, WebDAV, scripts, …).

The goal is to catch accidental misuse, not to be a hardened sandbox. Power-user attacks via lower-level APIs are intentionally out of scope — they're not what a normal user does by mistake.

The CD subsystem opts out of these checks by surrounding its legitimate writes with behaviourFilter.disableBehaviour(ContentModel.TYPE_CD_DEFINITION), which silences the cd:definition-bound bindings.

Nested Class Summary

Nested classes/interfaces inherited from interface org.alfresco.repo.policy.Policy

Policy.Arg

Field Summary

Fields inherited from interface org.alfresco.repo.node.NodeServicePolicies.BeforeCreateNodePolicy

QNAME

Fields inherited from interface org.alfresco.repo.node.NodeServicePolicies.BeforeDeleteNodePolicy

QNAME

Fields inherited from interface org.alfresco.repo.node.NodeServicePolicies.BeforeMoveNodePolicy

QNAME

Fields inherited from interface org.alfresco.repo.node.NodeServicePolicies.BeforeSetNodeTypePolicy

QNAME

Fields inherited from interface org.alfresco.repo.node.NodeServicePolicies.BeforeUpdateNodePolicy

QNAME

Fields inherited from interface org.alfresco.repo.policy.Policy

NAMESPACE

Constructor Summary

Constructors

Constructor	Description
CDDefinitionProtection(PolicyComponent policyComponent, NamespaceService namespaceService)

Method Summary

Modifier and Type	Method	Description
void	beforeCreateNode(NodeRef parentRef, QName assocTypeQName, QName assocQName, QName nodeTypeQName)	Called before a new node is created.
void	beforeDeleteNode(NodeRef nodeRef)	Called before a node is deleted.
void	beforeMoveNode(ChildAssociationRef oldChildAssocRef, NodeRef newParentRef)	Called before a node is moved.
void	beforeSetNodeType(NodeRef nodeRef, QName oldType, QName newType)	sys:base binding — rejects setType(node, cd:definition).
void	beforeUpdateNode(NodeRef nodeRef)	Called before a node is updated.
void	init()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CDDefinitionProtection

public CDDefinitionProtection(PolicyComponent policyComponent,
 NamespaceService namespaceService)

Method Details

init

public void init()

beforeCreateNode

public void beforeCreateNode(NodeRef parentRef,
 QName assocTypeQName,
 QName assocQName,
 QName nodeTypeQName)

Description copied from interface: NodeServicePolicies.BeforeCreateNodePolicy

Called before a new node is created.

Specified by:

beforeCreateNode in interface NodeServicePolicies.BeforeCreateNodePolicy

Parameters:

parentRef - the parent node reference

assocTypeQName - the association type qualified name

assocQName - the association qualified name

nodeTypeQName - the node type qualified name

beforeUpdateNode

public void beforeUpdateNode(NodeRef nodeRef)

Description copied from interface: NodeServicePolicies.BeforeUpdateNodePolicy

Called before a node is updated. This includes the modification of properties, child and target associations and the addition of aspects.

Specified by:

beforeUpdateNode in interface NodeServicePolicies.BeforeUpdateNodePolicy

Parameters:

nodeRef - reference to the node being updated

beforeDeleteNode

public void beforeDeleteNode(NodeRef nodeRef)

Description copied from interface: NodeServicePolicies.BeforeDeleteNodePolicy

Called before a node is deleted.

Specified by:

beforeDeleteNode in interface NodeServicePolicies.BeforeDeleteNodePolicy

Parameters:

nodeRef - the node reference

beforeMoveNode

public void beforeMoveNode(ChildAssociationRef oldChildAssocRef,
 NodeRef newParentRef)

Description copied from interface: NodeServicePolicies.BeforeMoveNodePolicy

Called before a node is moved.

Specified by:

beforeMoveNode in interface NodeServicePolicies.BeforeMoveNodePolicy

Parameters:

oldChildAssocRef - the child association reference prior to the move

newParentRef - the new parent node reference

beforeSetNodeType

public void beforeSetNodeType(NodeRef nodeRef,
 QName oldType,
 QName newType)

sys:base binding — rejects setType(node, cd:definition).

Specified by:

beforeSetNodeType in interface NodeServicePolicies.BeforeSetNodeTypePolicy

Parameters:

nodeRef - the node having its type set.

oldType - the current type of the node.

newType - the type the node will be given.